$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft File: er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json) Hash identifier: hwLdn5uVF7LjteNEEu4k6a1e4WDBokusz/GRKT5tkFI= Subject key identifier: CD:91:E7:1B:82:07:1C:C3:32:71:B6:04:42:46:7E:C0:4D:25:6E:66 Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft Manifest number: 04E8 Signing time: Tue 04 Nov 2025 23:50:33 +0000 Manifest this update: Tue 04 Nov 2025 23:50:32 +0000 Manifest next update: Tue 11 Nov 2025 23:50:32 +0000 Files and hashes: 1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: IuZBdJ+mUGeNfwUFtptoRPpPj2RBYAbUNIBzwLwYimg=) 2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: 4XKTIg0bVBrjQ4gKKV2hpe4LJ1uznZVmF62ttuEN2yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Validity Not Before: Nov 4 23:50:32 2025 GMT Not After : Nov 11 23:50:32 2025 GMT Subject: CN=690a9148-0fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:75:3e:3d:1c:77:02:a2:06:72:d8:0f:11:ad: 4e:08:b0:a5:e6:96:01:dd:4f:2d:22:1d:c0:08:e9: a7:90:68:41:6d:e6:9d:3f:3c:4c:48:f0:d7:94:f3: a2:eb:dd:79:a0:9a:fb:ad:a0:e7:eb:a2:f5:bd:4c: 61:c6:07:9d:af:52:3c:f3:1b:80:bb:f2:dc:0d:66: 77:b6:d7:4a:63:e7:21:86:df:00:98:49:be:7b:61: a4:0a:d1:c8:5e:61:d0:eb:e3:4a:bb:62:3c:53:e5: 2f:0e:b1:05:b2:34:7b:7d:0c:cd:7a:42:6d:0d:d8: a8:8c:db:88:e3:c3:08:66:11:db:0d:b8:b4:9e:57: c0:4a:2f:aa:97:c6:e4:9a:4b:2c:81:a2:e2:6c:d0: 60:70:d8:6e:89:51:b3:f8:46:79:84:e3:c0:a4:56: 65:91:3e:cf:c1:40:fe:7f:b7:3e:74:ad:ec:65:c3: 33:cf:c0:5c:d9:01:13:e1:dc:ef:cc:10:48:37:43: 25:4b:e5:20:08:9b:9f:2b:fc:e4:ad:31:39:a3:c7: a4:9a:66:94:39:09:e6:0e:d3:14:a4:e4:88:b2:1d: 9c:ab:f6:cd:58:5b:99:be:dc:af:ff:91:03:81:f0: 82:b5:55:3b:fb:38:0c:2d:f7:49:e0:d8:64:81:3f: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:91:E7:1B:82:07:1C:C3:32:71:B6:04:42:46:7E:C0:4D:25:6E:66 X509v3 Authority Key Identifier: keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:29:fe:33:ca:c0:61:38:3d:f7:c4:67:fb:5e:ce:b3:74:20: 7b:20:76:05:b8:a3:91:e7:e3:5c:bc:2c:5c:66:f0:ed:a8:92: fa:f5:b4:de:67:59:93:65:4b:66:36:d0:78:bb:31:f1:8e:a1: 0a:34:86:58:5f:42:d8:dd:02:ab:af:a9:e6:84:68:e8:4e:5d: 22:65:08:14:5c:b5:fb:3e:35:e6:04:d3:aa:c5:6c:49:b0:15: 2f:47:a8:9d:33:52:94:c2:d5:3a:26:51:b8:65:20:18:a7:9c: a4:31:69:7f:b0:9f:06:3c:b5:c0:2a:68:50:19:00:57:4e:80: 9d:f2:93:a8:e6:41:fd:f5:39:82:0f:d5:f7:b6:71:63:b9:41: a9:43:8c:9a:9d:7e:09:60:c5:7c:84:60:09:8e:79:f6:af:a6: 85:20:6c:aa:06:92:ae:6a:29:b9:aa:0b:44:99:7f:ec:c0:e0: 45:04:eb:1d:58:82:e3:7a:9c:10:c5:67:b6:8b:0e:da:49:58: bf:9e:fd:a5:8f:e8:8a:c1:af:11:6f:3e:23:0f:3d:99:9e:ee: 7f:83:7a:57:0a:40:79:14:4a:fd:f5:f3:39:af:b6:a8:f9:61: a6:03:81:95:7f:b2:95:b5:c6:31:57:c1:fc:a5:a8:e8:f9:b7: 91:1c:c5:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURGQkQxMTAvBgNVBAUTKDdBQkVFRTY3QUM2MTMxM0ExRTFGQThCMzg2NUQzRkIx RjYzNEY3NDMwHhcNMjUxMTA0MjM1MDMyWhcNMjUxMTExMjM1MDMyWjAYMRYwFAYD VQQDEw02OTBhOTE0OC0wZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HU+PRx3AqIGctgPEa1OCLCl5pYB3U8tIh3ACOmnkGhBbeadPzxMSPDXlPOi 6915oJr7raDn66L1vUxhxgedr1I88xuAu/LcDWZ3ttdKY+chht8AmEm+e2GkCtHI XmHQ6+NKu2I8U+UvDrEFsjR7fQzNekJtDdiojNuI48MIZhHbDbi0nlfASi+ql8bk mkssgaLibNBgcNhuiVGz+EZ5hOPApFZlkT7PwUD+f7c+dK3sZcMzz8Bc2QET4dzv zBBIN0MlS+UgCJufK/zkrTE5o8ekmmaUOQnmDtMUpOSIsh2cq/bNWFuZvtyv/5ED gfCCtVU7+zgMLfdJ4NhkgT+6QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2R5xuC BxzDMnG2BEJGfsBNJW5mMB8GA1UdIwQYMBaAFHq+7mesYTE6Hh+os4ZdP7H2NPdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REZCRC9EMzRBNjgzMDM4 NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1Ub2VINml6aGwwX3NmWTA5 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyN3VaNnhoTVRvZUg2aXpobDBfc2ZZMDkwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REZCRC9EMzRBNjgzMDM4NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1U b2VINml6aGwwX3NmWTA5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACKf4zysBhOD33xGf7Xs6zdCB7IHYFuKOR5+NcvCxcZvDtqJL69bTe Z1mTZUtmNtB4uzHxjqEKNIZYX0LY3QKrr6nmhGjoTl0iZQgUXLX7PjXmBNOqxWxJ sBUvR6idM1KUwtU6JlG4ZSAYp5ykMWl/sJ8GPLXAKmhQGQBXToCd8pOo5kH99TmC D9X3tnFjuUGpQ4yanX4JYMV8hGAJjnn2r6aFIGyqBpKuaim5qgtEmX/swOBFBOsd WILjepwQxWe2iw7aSVi/nv2lj+iKwa8Rbz4jDz2Znu5/g3pXCkB5FEr99fM5r7ao +WGmA4GVf7KVtcYxV8H8pajo+beRHMWb -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:17 2025 by rpki-client